Finding All Insecure Content on a Secure Page
Note, in recent versions of Chrome, these errors will be displayed in the Javascript Console. e.g. The page at https://mysecuresite.com displayed insecure content from http://unsecuresite.com/some.jpg.
browser-security
How to override content security policy while including script in browser JS console?
You can turn off the CSP for your entire browser in Firefox by disabling security.csp.enable in the about:config menu. If you do this, you should use an entirely separate browser for testing. For example, install Firefox Developer Edition alongside your normal browser and use that for testing (and not normal Web use). As an alternative, … Read more